CVE-2010-0957

CVE-2010-0957

EPSS 1.3%

Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.org/1002-exploits/saskiashopsystem-lfi.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/56358 http://www.exploit-db.com/exploits/11433 http://www.securityfocus.com/bid/38574